CVE-2023-2619: falha de média gravidade em SourceCodester Online Tours & Travels…
SourceCodester Online Tours & Travels Management System disapprove_delete.php exec sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.7%
A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects the function exec of the file disapprove_delete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228549 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Online Tours & Travels Management SystemCVEs relacionadas — SourceCodester Online Tours & Travels…
No mesmo produto, das mais perigosas para as menos.
CVE-2023-0324HIGHSourceCodester Online Tours & Travels Management System page-login.php sql injectionEPSS 18.8%CVE-2023-0516MEDIUMSourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injectionEPSS 1.1%CVE-2023-0515MEDIUMSourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injectionEPSS 1.1%CVE-2023-1590MEDIUMSourceCodester Online Tours & Travels Management System currency.php exec sql injectionEPSS 0.8%CVE-2023-1589MEDIUMSourceCodester Online Tours & Travels Management System approve_delete.php exec sql injectionEPSS 0.8%CVE-2023-4866MEDIUMSourceCodester Online Tours & Travels Management System booking.php exec sql injectionEPSS 0.7%